PT-2022-31816

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description A potential double free issue was discovered in the create var ref function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...

PT-2022-30936

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description A potential double free issue was discovered in the create var ref function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...

Malicious code in exporting-ref-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c85877779d24911c119e2efc1fa59b688c166a71c97b0537c4dbc6af25ba7a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2923 Malicious code in exporting-ref-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c85877779d24911c119e2efc1fa59b688c166a71c97b0537c4dbc6af25ba7a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ref-client-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf19b642e7b2ecb13e2b7b0b395605636b74380541b56309a5693b48bed81428 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5729 Malicious code in ref-client-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf19b642e7b2ecb13e2b7b0b395605636b74380541b56309a5693b48bed81428 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

`array!` macro is unsound in presence of traits that implement methods it calls internally

Affected versions of this crate called some methods using auto-ref. The affected code looked like this. rust let mut arr = $crate::core::mem::MaybeUninit::uninit; let mut vec = $crate::ArrayVec::::newarr.asmutptr as mut T; In this case, the problem is that asmutptr is a method of &mut MaybeUninit...

GHSA-83GG-PWXF-JR89 `array!` macro is unsound in presence of traits that implement methods it calls internally

Affected versions of this crate called some methods using auto-ref. The affected code looked like this. rust let mut arr = $crate::core::mem::MaybeUninit::uninit; let mut vec = $crate::ArrayVec::::newarr.asmutptr as mut T; In this case, the problem is that asmutptr is a method of &mut MaybeUninit...

GSD-2022-1001803 net/sched: act_ct: fix ref leak when switching zones

net/sched: actct: fix ref leak when switching zones This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

GSD-2022-1001771 scsi: qla2xxx: Implement ref count for SRB

scsi: qla2xxx: Implement ref count for SRB This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

GSD-2022-1001487 net/sched: act_ct: fix ref leak when switching zones

net/sched: actct: fix ref leak when switching zones This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001169 net/sched: act_ct: fix ref leak when switching zones

net/sched: actct: fix ref leak when switching zones This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

CVE-2022-0410

The WP Visitor Statistics Real Time Traffic WordPress plugin before 5.6 does not sanitise and escape the id parameter before using it in a SQL statement via the refUrlDetails AJAX action, available to any authenticated user, leading to a SQL injection...

RUSTSEC-2022-0096 Invalid drop of VMExternRef from partially-initialized instances in the pooling instance allocator

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-88xq-w8cq-xfg7. For more information see the GitHub-hosted security advisory...

GHSA-88XQ-W8CQ-XFG7 Invalid drop of partially-initialized instances in the pooling instance allocator for modules with defined `externref` globals

Impact There exists a bug in the pooling instance allocator in Wasmtime's runtime where a failure to instantiate an instance for a module that defines an externref global will result in an invalid drop of a VMExternRef via an uninitialized pointer. As instance slots may be reused between...

shure.com Open Redirect vulnerability OBB-2349218

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2024-10531

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.18.0-305.el8.x86 64 Description The vulnerability is related to a ref count issue in the scsi: qedf component of the Linux kernel. When a LOGO request is received during TMF, it can cause one of the I/Os to han...

CVE-2022-22891

Jerryscript 3.0.0 was discovered to contain a SEGV vulnerability via ecmarefobjectinline in /jerry-core/ecma/base/ecma-gc.c...

UBUNTU-CVE-2022-22891

Jerryscript 3.0.0 was discovered to contain a SEGV vulnerability via ecmarefobjectinline in /jerry-core/ecma/base/ecma-gc.c...

PT-2022-15719

Name of the Vulnerable Software and Affected Versions Jerryscript version 3.0.0 Description A SEGV issue was discovered in Jerryscript via the ecma ref object inline function in /jerry-core/ecma/base/ecma-gc.c. Recommendations For Jerryscript version 3.0.0, consider restricting access to the ecma...